Black Hat Day 1 Briefings 41m talk 4m read When 'Changed Files' Changed Everything: Uncovering and Responding to the tj-actions Supply Chain Breach Varun Sharma, Ashish Kurmi application securitydefensive security